$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e56a5122-33fc-33a6-8667-2401e22bc665.roa File: e56a5122-33fc-33a6-8667-2401e22bc665.roa (raw, json) Hash identifier: 8jBxHVWOPQWsceGxUvqoOUi7mkRD8SADq2WlFNg4hGg= Subject key identifier: 96:E8:85:73:F7:5A:B9:E6:55:49:B6:A9:DE:2E:D8:22:13:4D:8B:04 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584B6797AE1CE202AAB8E6719A20 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e56a5122-33fc-33a6-8667-2401e22bc665.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 15169 IP address blocks: 70.32.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:ae:1c:e2:02:aa:b8:e6:71:9a:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=0d30817c-11d4-47b7-baf7-d040f36a14c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:9b:21:90:4a:a4:66:d1:08:fb:69:7e:32:8c: 04:eb:4c:16:83:bf:e2:67:b6:34:98:bf:6d:25:d4: f4:f0:1d:2d:62:ef:e5:d1:7a:d1:03:83:07:df:d8: 5a:8b:df:93:3c:46:41:be:dd:2d:b1:b8:c6:ae:a9: db:38:5c:72:47:23:65:37:22:8d:5e:fa:9e:50:4c: 21:38:b2:d0:e8:11:58:28:45:8e:24:8b:89:2e:e4: f9:28:29:d9:21:f4:0d:c4:04:a9:5d:3b:dd:65:3a: 57:9e:02:8f:52:d4:85:74:1a:b4:36:c5:91:15:1f: a2:c1:f8:14:5a:bc:cc:bb:2a:74:32:3a:da:08:d2: 3e:79:10:1e:6e:2d:74:ef:a3:5e:71:7a:2c:3f:65: d2:92:70:dc:bc:e7:e4:52:a9:7f:0c:0d:ed:9d:86: b1:99:c9:01:90:30:8e:80:6c:12:dc:89:63:55:69: 79:88:c1:26:5a:33:53:5c:4f:a6:e5:2d:58:d2:0d: 0c:b3:b1:03:96:58:60:f9:3d:18:89:21:68:4f:6a: c1:5c:26:98:b9:1f:a8:79:be:be:ab:d6:21:83:d1: d9:d3:ba:e1:92:c4:ba:e2:64:8c:d6:7b:20:3f:68: 74:a8:b5:21:71:c7:6f:2e:b3:cf:ec:7b:14:be:d7: 0a:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:E8:85:73:F7:5A:B9:E6:55:49:B6:A9:DE:2E:D8:22:13:4D:8B:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e56a5122-33fc-33a6-8667-2401e22bc665.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 70.32.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:ef:c5:ec:2a:c4:d8:5c:56:c5:e2:86:c6:38:d2:9d:60:17: f7:ee:e9:ac:8a:b6:7f:ed:b0:c8:f9:42:4c:c2:68:96:e9:d7: da:3f:b0:24:5d:a1:14:09:3d:94:ae:09:3c:73:ea:f1:3d:65: 3b:4f:eb:fd:c4:18:49:6a:53:68:95:64:13:54:93:76:03:7c: 7c:25:13:9f:e3:e0:de:fd:e3:82:2d:a3:b1:08:82:86:75:0e: 69:d8:5d:02:fb:07:8e:6d:10:49:d9:c5:ef:6b:61:1f:00:d6: 27:a3:dc:94:1f:12:5a:52:ce:07:f5:d6:aa:d1:ac:0b:dc:92: ae:42:2c:d6:a7:4c:53:df:ac:46:f9:86:d2:b2:08:e9:ca:ea: f0:bc:ee:b4:a2:18:df:49:22:9c:e0:1d:c2:c1:b5:1b:97:3c: 48:c7:3d:e9:0e:cd:a4:54:d5:6c:1b:aa:e9:55:ca:54:8a:b1: 5a:2d:48:13:4a:f1:46:22:cb:fb:db:c6:9f:de:3c:05:1b:b2: b7:f6:55:b7:a6:35:bb:3d:00:e7:ca:98:25:a4:57:4c:21:ca: 97:34:02:5d:0d:e8:e9:01:d4:d6:24:db:d4:e5:b4:5c:f9:92: a4:60:34:27:cd:18:8a:48:4c:f1:4a:fe:d7:ce:5f:5a:7b:ca: c3:0f:fb:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl64c4gKquOZxmiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk MGQzMDgxN2MtMTFkNC00N2I3LWJhZjctZDA0MGYzNmExNGM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAopshkEqkZtEI+2l+MowE60wWg7/iZ7Y0mL9t JdT08B0tYu/l0XrRA4MH39hai9+TPEZBvt0tsbjGrqnbOFxyRyNlNyKNXvqeUEwh OLLQ6BFYKEWOJIuJLuT5KCnZIfQNxASpXTvdZTpXngKPUtSFdBq0NsWRFR+iwfgU WrzMuyp0MjraCNI+eRAebi1076NecXosP2XSknDcvOfkUql/DA3tnYaxmckBkDCO gGwS3IljVWl5iMEmWjNTXE+m5S1Y0g0Ms7EDllhg+T0YiSFoT2rBXCaYuR+oeb6+ q9Yhg9HZ07rhksS64mSM1nsgP2h0qLUhccdvLrPP7HsUvtcKjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJbohXP3WrnmVUm2qd4u2CITTYsEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZTU2YTUxMjItMzNmYy0z M2E2LTg2NjctMjQwMWUyMmJjNjY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARiCEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKXvxewqxNhcVsXihsY40p1gF/fu6ayKtn/tsMj5QkzCaJbp19o/sCRd oRQJPZSuCTxz6vE9ZTtP6/3EGElqU2iVZBNUk3YDfHwlE5/j4N7944Ito7EIgoZ1 DmnYXQL7B45tEEnZxe9rYR8A1iej3JQfElpSzgf11qrRrAvckq5CLNanTFPfrEb5 htKyCOnK6vC87rSiGN9JIpzgHcLBtRuXPEjHPekOzaRU1WwbqulVylSKsVotSBNK 8UYiy/vbxp/ePAUbsrf2VbemNbs9AOfKmCWkV0whypc0Al0N6OkB1NYk29TltFz5 kqRgNCfNGIpITPFK/tfOX1p7ysMP+yo= -----END CERTIFICATE-----Generated at Fri Oct 17 08:46:09 2025 by rpki-client